[IGNITE-12540] Update versions of vulnerable dependencies

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 2.8
• Component/s: general, hibernate, rest, spring
• Release Note: Increase minor dependency version for spring-data, spring modules and jetty, jackson, beanutils dependencies.
• Assignee: Ilya Kasnacheev
• Reporter: Ilya Kasnacheev
• Reviewer: Vladimir Pligin
• Created: 14/Jan/20 17:01
• Updated: 01/May/20 10:51
• Resolved: 22/Jan/20 11:58

Description

Let's bump some crucial dependencies to their latest minor versions and try to include it in 2.8 also.

spring 4 and 5, spring data, hibernate, jetty, jackson-databind.

Lesser-used packages, notable Zk discovery, are not affected.

Issue Links

• is duplicated by: IGNITE-12129 Upgrade spring-5.0.X and spring-data-2.0.X dependencies to latest versions
• links to: GitHub Pull Request #7260
• links to: Ignite Developers maillist discussion